ipfw nat drops icmp packets from localhost

2011-10-06 Thread Oleg Strizhak
Dear All! Would you mind enlightening me a little bit on the following: when I ping or traceroute any external host (even default gateway) w/o ipfw -- it's OK; when I ping -- w/ ipfw -- it's OK when I traceroute -- it FAILS =( all hop are three stars in a row when any LAN (192.168.0.х) host

Re: ipfw nat drops icmp packets from localhost

2011-10-06 Thread Oleg Strizhak
Hello, Andrey V. Elsukov! You wrote on 06.10.2011 at 13:38: On 06.10.2011 12:29, Oleg Strizhak wrote: After an investigation I've found out a very strange situation - it seems to me, that ipfw nat drops some (type 11?) icmp reply packets, whose udp request packets it hasn't rewritten/seen

Re: ipfw nat drops icmp packets from localhost [patch attached]

2011-10-06 Thread Oleg Strizhak
Здравствуйте, Andrey V. Elsukov! Вы писали 06.10.2011 13:38: On 06.10.2011 12:29, Oleg Strizhak wrote: After an investigation I've found out a very strange situation - it seems to me, that ipfw nat drops some (type 11?) icmp reply packets, whose udp request packets it hasn't rewritten/seen

Re: ipfw nat drops icmp packets from localhost

2011-10-06 Thread Alexander V. Chernikov
On 06.10.2011 14:42, Oleg Strizhak wrote: Hello, Andrey V. Elsukov! You wrote on 06.10.2011 at 13:38: On 06.10.2011 12:29, Oleg Strizhak wrote: After an investigation I've found out a very strange situation - it seems to me, that ipfw nat drops some (type 11?) icmp reply packets, whose